ReleaseBytes
python uv Releases · · 0.11.28

uv 0.11.28 releases security fixes and performance enhancements

sdkengineer
patch

Version 0.11.28 of uv hardens ZIP handling against parser differentials by updating the astral-async-zip library. This release also includes performance optimizations by reducing allocations in various operations and enhancements to error reporting for better user feedback. These changes are relevant to all users of uv, particularly those dealing with complex dependency management scenarios.

  • →Improve trace logs for unexpected error chains
  • →Move lockfile update guidance to a hint
  • →Preserve indentation for multiline error causes
  • →Render user errors with their cause chains
  • →Route final command errors through the printer to respect -q and -qq
Enhancements (7) ›
  • Improve trace logs for unexpected error chains
    #20220
  • Move lockfile update guidance to a hint
    #20219
  • Preserve indentation for multiline error causes
    #20156
  • Render user errors with their cause chains
    #20217
  • Route final command errors through the printer to respect -q and -qq
    #20163
  • Use standard rendering for uv build errors
    #20159
  • Use standard rendering for tool requirement errors
    #20160
Fixes (4) ›
  • Avoid overflow when computing HTTP cache age
    #20178
  • Respect --upgrade when upgrade-package is configured
    #19955
  • Support uv tree in dependency-group-only projects
    #20167
  • Treat cache entries as stale at exact expiration
    #20183
Read the original announcement →

https://github.com/astral-sh/uv/releases/tag/0.11.28

Related releases